Attrition vs. Privacy Rights: A Delicate Balance